WAAS & Radius on Windows 2008 NPS Server

vermin — Thu, 27 May 2010 10:15:03 GMT

WAAS & Radius on Windows 2008 NPS ServerHas anybody succesfully got this working?

There seems to be only a few things to configure on the WAAS central manager (Shared encryption key ,server name and server port) under the 'Radius' menu and then the authentication login method order under 'Authentication Methods' menu.

This is all configured and looks ok.

On the NPS server the client is configured under 'RADIUS Clients' menu (friendly name,IP address shared secret key & vendor) and is enabled,

and under the 'Network Policies' menu the same settings as our Cisco ASA's are configured (which are working),execpt the name has been changed.

I have the vendor specific attributes as below:-

Cisco-AV-Pair shell:priv-lvl=15 to shell:

Here is some output from the Radius logs

"UKA-SR-MSNPS-10","IAS",05/24/2010,10:21:50,3,,"ANYWHEREADGLOBAL\admin",,,,,,,,9,"X.X.X.X","UKB-AP-WAECM-10",,,,,,,1,,16,"311 1 fe80::8197:671e:537d:2e28 05/17/2010 15:14:40 308",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"Use Windows authentication for all users",1,,,,
"UKA-SR-MSNPS-10","IAS",05/24/2010,10:22:05,1,"joebloggsadmin","anywhere.local/UKDC/Administration/BloggsAdmin, Joe",,,,,"content_engine_config","X.X.X.X",31704,9,"X.X.X.X","UKB-AP-WAECM-10",,,,,,8,1,"Connections to other access servers",0,"311 1 fe80::8197:671e:537d:2e28 05/17/2010 15:14:40 309",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"Use Windows authentication for all users",1,,,,
"UKA-SR-MSNPS-10","IAS",05/24/2010,10:22:05,3,,"anywhere.local/UKDC/Administration/BloggsAdmin, Joe",,,,,,,,9,"X.X.X.X","UKB-AP-WAECM-10",,,,,,,1,"Connections to other access servers",65,"311 1 fe80::8197:671e:537d:2e28 05/17/2010 15:14:40 309",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"Use Windows authentication for all users",1,,,,

Event Viewer output

Event 13,NPS

A RADIUS message was received from the invalid RADIUS client IP address X.X.X.X (WAAS IP )

Any help would be appreciated

Cheers,

Nick

Re: WAAS & Radius on Windows 2008 NPS Server

Zach Seils — Thu, 27 May 2010 14:08:56 GMT

Microsoft claims the following are the reasons you would see Event 13:

In the NPS Microsoft Management Console (MMC), a RADIUS client is configured by fully qualified domain name (FQDN) or NetBIOS name rather than by IP address, and NPS has not received a DNS server response to the name resolution query. Without the IP address provided by the name resolution query, NPS cannot contact the RADIUS client.
NPS is receiving communication from a RADIUS client that is not configured in the NPS MMC.
In the NPS MMC, a RADIUS client is configured by either IPv4 or IPv6 address, but the format of the IP address is incorrect.

Regards,

Zach

topic Re: WAAS & Radius on Windows 2008 NPS Server in Application Networking

WAAS & Radius on Windows 2008 NPS Server

Re: WAAS & Radius on Windows 2008 NPS Server